Static task
static1
Behavioral task
behavioral1
Sample
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe
Resource
win10v2004-20221111-en
General
-
Target
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171
-
Size
306KB
-
MD5
1f6946cf0d713c43788eaec87fb875b0
-
SHA1
fa1c640854c05b5fcfa0792ca4d786165559ff2c
-
SHA256
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171
-
SHA512
b3610104466b4d74e8a66b457ead673db069d6812b49e5d7d1ab7a9e1726fe1ee372d8309a5a4f129476a3dd71d8e2f3541dfea84c51bfd6eb09c1e01e547b66
-
SSDEEP
6144:Nq08EMJH46lRYNCCNXMv4dqldFhnNhN5f+bSvB7CCDhgZt67fk18XNf4L:NqSMxTleYCVMvLlHhPLPeC9cTC4L
Malware Config
Signatures
Files
-
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe windows x86
3188a5a4eec493e1e2d80b64e3840417
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexW
GetModuleHandleW
FindNextVolumeA
CloseHandle
ReleaseSemaphore
CloseHandle
CreateSemaphoreA
GetFileAttributesW
lstrcmpW
WaitForMultipleObjects
FindFirstVolumeA
GetEnvironmentVariableW
GetCurrentDirectoryA
GetDiskFreeSpaceW
GetFullPathNameA
ReadConsoleA
GetModuleHandleA
GetVolumePathNameA
HeapCreate
CloseHandle
GetFullPathNameA
GetConsoleMode
GetStringTypeA
certmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.pack Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE